Commit 3bc90f23 authored by Bodo Möller's avatar Bodo Möller
Browse files

Fix typo in -clrext option, but add a compatibility hack because 

0.9.5a should not break anything that works in 0.9.5.
parent 98e04f9e

CHANGES

+5 −0
Original line number Diff line number Diff line
@@ -4,6 +4,11 @@ 


 Changes between 0.9.5 and 0.9.5a  [XX XXX 2000]



  *) Rename openssl x509 option '-crlext', which was added in 0.9.5,

     to '-clrext' (= clear extensions), as intended and documented.

     [Bodo Moeller; inconsistency pointed out by Michael Attili

     <attili@amaxo.com>]



  *) Fix for HMAC. It wasn't zeroing the rest of the block if the key length

     was larger than the MD block size.      

     [Steve Henson, pointed out by Yost William <YostW@tce.com>]

apps/x509.c

+8 −1
Original line number Diff line number Diff line
@@ -126,7 +126,7 @@ static char *x509_usage[]={ 
" -md2/-md5/-sha1/-mdc2 - digest to use\n",

" -extfile        - configuration file with X509V3 extensions to add\n",

" -extensions     - section from config file with X509V3 extensions to add\n",

" -crlext         - delete extensions before signing and input certificate\n",

" -clrext         - delete extensions before signing and input certificate\n",

NULL

};
@@ -365,8 +365,15 @@ int MAIN(int argc, char **argv) 
			aliasout= ++num;

		else if (strcmp(*argv,"-CAcreateserial") == 0)

			CA_createserial= ++num;

		else if (strcmp(*argv,"-clrext") == 0)

			clrext = 1;

#if 1 /* stay backwards-compatible with 0.9.5; this should go away soon */

		else if (strcmp(*argv,"-crlext") == 0)

			{

			BIO_printf(bio_err,"use -clrext instead of -crlext\n");

			clrext = 1;

			}

#endif

		else if ((md_alg=EVP_get_digestbyname(*argv + 1)))

			{

			/* ok */